41a61a8507
1. an exercise_id is provided ==> only the LtiParameter object for the current user, consumer, and exercise is deleted. 2. no exercise_id is provided ==> external user and consumer are removed from the session, all LtiParameter objects for this user and consumer are deleted. This enables users to have several tabs with exercises open and submitting the results to the tool consumer. When an exercise has been submitted, the user cannot use the back button to get back to CodeOcean and work on the submitted or any other exercise. For now a warning has been added to the info text to tell users not to do this. (As the LtiParameters have been deleted, the points can no more be submitted to the consumer.) @TODO disable/redirect back button?
48 lines
1.4 KiB
Ruby
48 lines
1.4 KiB
Ruby
class SessionsController < ApplicationController
|
|
include Lti
|
|
|
|
[:require_oauth_parameters, :require_valid_consumer_key, :require_valid_oauth_signature, :require_unique_oauth_nonce, :require_valid_exercise_token].each do |method_name|
|
|
before_action(method_name, only: :create_through_lti)
|
|
end
|
|
|
|
skip_after_action :verify_authorized
|
|
skip_before_action :verify_authenticity_token, only: :create_through_lti
|
|
|
|
def create
|
|
if login(params[:email], params[:password], params[:remember_me])
|
|
redirect_back_or_to(:root, notice: t('.success'))
|
|
else
|
|
flash.now[:danger] = t('.failure')
|
|
render(:new)
|
|
end
|
|
end
|
|
|
|
def create_through_lti
|
|
set_current_user
|
|
store_lti_session_data(consumer: @consumer, parameters: params)
|
|
store_nonce(params[:oauth_nonce])
|
|
redirect_to(implement_exercise_path(@exercise),
|
|
notice: t("sessions.create_through_lti.session_#{lti_outcome_service?(@exercise.id) ? 'with' : 'without'}_outcome",
|
|
consumer: @consumer))
|
|
end
|
|
|
|
def destroy
|
|
if current_user.external_user?
|
|
clear_lti_session_data
|
|
else
|
|
logout
|
|
end
|
|
redirect_to(:root, notice: t('.success'))
|
|
end
|
|
|
|
def destroy_through_lti
|
|
@consumer = Consumer.find_by(id: params[:consumer_id])
|
|
@submission = Submission.find(params[:submission_id])
|
|
clear_lti_session_data(@submission.exercise_id)
|
|
end
|
|
|
|
def new
|
|
redirect_to(:root, alert: t('shared.already_signed_in')) if current_user
|
|
end
|
|
end
|